Spy

Spyware:Win32/IEPlugin malicious file

Malware Removal

The Spyware:Win32/IEPlugin is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Spyware:Win32/IEPlugin virus can do?

  • Unconventionial language used in binary resources: Ukrainian
  • Authenticode signature is invalid

How to determine Spyware:Win32/IEPlugin?


File Info:

name: 531C422D37C747EC4B86.mlw
path: /opt/CAPEv2/storage/binaries/16e8e4bc57da462d176619aa2c5f47ccba94af73a58c4df8eb3580cfb64df06c
crc32: B259EA02
md5: 531c422d37c747ec4b86396ff8e00c1a
sha1: a62597a49dda5dd477766847df0e5349f6939143
sha256: 16e8e4bc57da462d176619aa2c5f47ccba94af73a58c4df8eb3580cfb64df06c
sha512: eeea4e5bd035cdc23a9300f3b5f8c7a42b34887e1d6ad38c5dd5bf7a0a68d5bd7a4f9cdb5b262945dede086c4c047e3f04a74e4f95b77c66bcf7bc28e3ef8b5b
ssdeep: 6144:N7pSXgC54S6z+FrT16pPmpfI/Ai2KHweqI8TSFkPr1e/J6Ic2aV8R98sd:N7pSXf5T6qFn16pPmeAUkPJe/MI4e
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1F384AF12F5E2C077C24F0131797E2BB6A3F9A6111DA59483EB5CAE5D6F31D83C216A0B
sha3_384: 2f018498faf428c39b972c3ec2e853b5e95d3086f4e92888350fbab35d3f7e73898d09e9f9c825179f76cb18f2b4952f
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2004-03-11 17:43:56

Version Info:

Comments:
CompanyName: IE PLUGIN LTD.
FileDescription: Intelligent Explorer
FileVersion: 2, 6, 0, 10
InternalName: Intelligent Explorer
LegalCopyright: Copyright 2002
LegalTrademarks:
OLESelfRegister:
OriginalFilename: Systb.DLL
PrivateBuild:
ProductName: Intelligent Explorer
ProductVersion: 2, 6, 0, 10
SpecialBuild:
Translation: 0x0409 0x04b0

Spyware:Win32/IEPlugin also known as:

LionicRiskware.Win32.Ieplugin.1!c
DrWebAdware.DrSearch
MicroWorld-eScanApplication.Imiserver.Ieplugin.B
FireEyeApplication.Imiserver.Ieplugin.B
SkyhighIMIServer.c
McAfeeIMIServer.c
Cylanceunsafe
ZillyaAdware.ImiBar.Win32.3
AlibabaAdWare:Win32/ImiBar.a24d2a4d
CrowdStrikewin/grayware_confidence_70% (D)
ArcabitApplication.Imiserver.Ieplugin.B
VirITAdware.Win32.ImiBar.C
SymantecAdware.IEPlugin
Elasticmalicious (moderate confidence)
ESET-NOD32Win32/Adware.ImiBar
CynetMalicious (score: 100)
ClamAVWin.Adware.Imiserv-1
Kasperskynot-a-virus:AdWare.Win32.ImiBar.f
BitDefenderApplication.Imiserver.Ieplugin.B
NANO-AntivirusRiskware.Win32.ImiBar.rrquz
AvastWin32:Adware-gen [Adw]
TencentWin32.AdWare.Imibar.Mjgl
TACHYONTrojan-Spy/W32.Imiserver.401408
EmsisoftApplication.Imiserver.Ieplugin.B (B)
F-SecureHeuristic.HEUR/AGEN.1329360
VIPREApplication.Imiserver.Ieplugin.B
TrendMicroADWARE_IEPLUGIN
SophosGeneric Reputation PUA (PUA)
Ikarusnot-a-virus:AdWare.Win32.ImiBar
JiangminAdware.ImiBar.c
WebrootAdware.IEPlugin
VaristW32/Adware.CMDC-8518
AviraHEUR/AGEN.1329360
Antiy-AVLGrayWare[AdWare]/Win32.ImiBar
KingsoftWin32.Troj.ImiBar.f
XcitiumApplication.Win32.Adware.ImiBar@3hzm
MicrosoftSpyware:Win32/IEPlugin
ZoneAlarmnot-a-virus:AdWare.Win32.ImiBar.f
GDataApplication.Imiserver.Ieplugin.B
GoogleDetected
AhnLab-V3Trojan/Win32.HDC.C12944
VBA32Adware.ImiBar
ALYacAdware.Toolbar.ImiTB
MAXmalware (ai score=100)
PandaTrj/Genetic.gen
TrendMicro-HouseCallADWARE_IEPLUGIN
RisingTrojan.Win32.Generic.14BDA431 (C64:YzY0OqIRSeC1Sq4X)
YandexAdware.Agent!0n6Uf8hjiEw
MaxSecureTrojan.Malware.1792390.susgen
FortinetRiskware/IMIServer
AVGWin32:Adware-gen [Adw]

How to remove Spyware:Win32/IEPlugin?

Spyware:Win32/IEPlugin removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment